HEX
Server: LiteSpeed
System: Linux cde2.duelhost.dk 4.18.0-553.34.1.lve.el8.x86_64 #1 SMP Thu Jan 9 16:30:32 UTC 2025 x86_64
User: dtptviut (1121)
PHP: 8.0.30
Disabled: exec,system,passthru,shell_exec,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/dtptviut/Maildir/.Junk/new/q1sEvcR-6548950503
From script@suncor.com Wed Jun 05 20:44:19 2024
Return-path: <script@suncor.com>
Envelope-to: mail@globen-flakket.dk
Delivery-date: Wed, 05 Jun 2024 20:44:19 +0200
Received: from mail by cde2.duelhost.dk with spam-scanned (Exim 4.97.1)
	(envelope-from <script@suncor.com>)
	id 1sEvcR-00000005lK6-1pTl
	for mail@globen-flakket.dk;
	Wed, 05 Jun 2024 20:44:19 +0200
Received: from localhost by cde2.duelhost.dk
	with SpamAssassin (version 4.0.1);
	Wed, 05 Jun 2024 20:44:19 +0200
From: "Aminu Swift" <script@suncor.com>
To: mail@globen-flakket.dk
Subject: *****SPAM***** RE: Here is the last warning.
Date: 05 Jun 2024 20:37:09 +0200
Message-Id: <20240605203709.814AF0ECEFA2C44C@suncor.com>
X-Spam-Checker-Version: SpamAssassin 4.0.1 (2024-03-26) on cde2.duelhost.dk
X-Spam-Flag: YES
X-Spam-Level: *********
X-Spam-Status: Yes, score=9.6 required=5.0 tests=BITCOIN_EXTORT_01,
	FSL_BULK_SIG,HDRS_MISSP,KHOP_HELO_FCRDNS,PDS_BTC_ID,PYZOR_CHECK,
	RCVD_IN_PSBL,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,
	RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,
	T_SCC_BODY_TEXT_LINE autolearn=no autolearn_force=no version=4.0.1
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_6660B203.9DB84438"

This is a multi-part message in MIME format.

------------=_6660B203.9DB84438
Content-Type: text/plain; charset=UTF-8
Content-Disposition: inline
Content-Transfer-Encoding: 8bit

Spam detection software, running on the system "cde2.duelhost.dk",
has identified this incoming email as possible spam.  The original
message has been attached to this so you can view it or label
similar future email.  If you have any questions, see
the administrator of that system for details.

Content preview:  Good day! Here is the last warning. Your system has been cracked.
   We have copied the entire information from your device to our servers. Besides,
   we have recorded the video from your camera with you watching a porn movie.
   

Content analysis details:   (9.6 points, 5.0 required)

 pts rule name              description
---- ---------------------- --------------------------------------------------
 2.7 RCVD_IN_PSBL           RBL: Received via a relay in PSBL
                            [172.245.92.219 listed in psbl.surriel.com]
 0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                            query to Validity was blocked.  See
                            https://knowledge.validity.com/hc/en-us/articles/20961730681243
                             for more information.
                        [172.245.92.219 listed in sa-trusted.bondedsender.org]
 0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                             Validity was blocked.  See
                            https://knowledge.validity.com/hc/en-us/articles/20961730681243
                             for more information.
                           [172.245.92.219 listed in bl.score.senderscore.com]
 0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                             Validity was blocked.  See
                            https://knowledge.validity.com/hc/en-us/articles/20961730681243
                             for more information.
                            [172.245.92.219 listed in sa-accredit.habeas.com]
 1.5 BITCOIN_EXTORT_01      Extortion spam, pay via BitCoin
-0.0 T_SCC_BODY_TEXT_LINE   No description available.
 2.5 HDRS_MISSP             Misspaced headers
 0.4 KHOP_HELO_FCRDNS       Relay HELO differs from its IP's reverse DNS
 0.5 PDS_BTC_ID             FP reduced Bitcoin ID
 2.0 PYZOR_CHECK            Listed in Pyzor (https://pyzor.readthedocs.io/en/latest/)
 0.0 FSL_BULK_SIG           Bulk signature with no Unsubscribe



------------=_6660B203.9DB84438
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: inline
Content-Transfer-Encoding: 8bit

Received: from seifertsystems.cc ([172.245.92.219] helo=mail0.northgacpa.com)
	by cde2.duelhost.dk with esmtps  (TLS1.3) tls TLS_AES_256_GCM_SHA384
	(Exim 4.97.1)
	(envelope-from <script@suncor.com>)
	id 1sEvcR-00000005lGL-0Om4
	for mail@globen-flakket.dk;
	Wed, 05 Jun 2024 20:44:19 +0200
From: "Aminu Swift" <script@suncor.com>
To: mail@globen-flakket.dk
Date: 05 Jun 2024 20:37:09 +0200
Message-ID: <20240605203709.814AF0ECEFA2C44C@suncor.com>
MIME-Version: 1.0
Content-Type: text/plain;
	charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Forward-Confirmed-ReverseDNS: Reverse and forward lookup success on 172.245.92.219, -10 Spam score
BlacklistCheck: Blacklisted address, +50 Spam score
SPFCheck: Soft Fail, 30 Spam score
X-Old-Subject:RE: Here is the last warning.
Subject:*****SPAM***** RE: Here is the last warning.
SpamTally: Final spam score: 90

Good day!

Here is the last warning.

Your system has been cracked. We have copied the entire=20
information from your device to our servers. Besides, we have=20
recorded the video from your camera with you watching a porn=20
movie.

My virus has infected your device via an adult website that you=20
recently visited.

I can share details in case if you don=E2=80=99t know how it works. A=20
Trojan virus grants me entire access and control over your=20
device. As a result, I can see your screen, activate the camera=20
and the microphone and you won=E2=80=99t even know about it.   

I have captured a video from your screen and the camera and have=20
made a video where one part of a screen demonstrates you=20
masturbating, and another part shows a porn video that you were=20
watching at that time.

I can see the entire list of your contacts in the phone and the=20
social networks.

I can send this video to all the contacts in your phone, the E-
mail and the social networks in a single click. Moreover, I can=20
send the data of your E-mail and your messengers to anybody.

This would ruin your reputation once and for all.

In case if you wish to prevent such consequences, do the=20
following-

Transfer 4700 USD (American dollars) to my Bitcoin- wallet.

(If you do not know how to do this, write in a search string in=20
Google: =C2=ABBuy bitcoin").

My Bitcoin Wallet (BTC Wallet):=20
bc1q62wl7qdtsd4at3y7m8g7k8t48j8u7zqp4ssc6m

Immediately after crediting of payment I shall erase your video=20
and shall not bother you anymore.

You have 60 hours (a little more than 2 days) to make the=20
payment.

I receive an automatic notification of reading of this letter.=20
The timer will also automatically launch right after you read=20
this E-mail.

Don=E2=80=99t try to complain anywhere- my BTC =E2=80=93wallet cannot be tr=
aced=20
and an E-mail that sent you the letter is created automatically-
any response would be senseless.

Should you try to share this E-mail with somebody, the system=20
will automatically send a request to the servers and they will=20
start sending the entire information to social networks.

The change of passwords of social networks, an E-mail and the=20
device would be senseless either as the whole data has already=20
been downloaded to cluster of my servers.

Contact me via email (jafar_script@outlook.com) with=20
subject:=C2=A0(*DEVICEKEYPC9273730*)

After these steps you will receive through email the key and a=20
decrypt tutorial. 

I wish you luck and don=E2=80=99t do something stupid. Consider your=20
reputation.

------------=_6660B203.9DB84438--